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MESSAGE CHAINING TRANSMISSION PROCESS AND SYSTEM FOR 

DATA BASES. 



Introduction 



The present invention concerns a proc e ss and method and a system of database for 
updating databases , and in particular during the transmission of a chain of messages. 



1 0 Background of the Invention 



In a system comprising a management centre and a plurality of subscribers over a wide 
territory, it is known to send the s e nding by telephone or h e rtz rout e of terrestrial 
broadcast updating information for the database of these subscribers is known . These 
1 5 messages are may be addressed^ either to all subscribers, or to one subscriber in 
particula r, that is to say that it th e y contains a subscrib e r modul e addr e ss . 

These messages are intended for th e administration of administering the system and are 
themselves superposed to the useful data such as video, audio or data. One understands 
20 that th e place us e d by thes e m e ssages is limited. Anoth e r limitation appli e s to t The 
length of the message which is therefore limited by the fact that the useful data can be 
interrupted only for a short moment. One und e rstands that For example , in the exampl e 
case of an audio/video transmission, the emission channel can be interrupted only for a 
short moment so that no visual impact will be perceptible. 

25 

This is why, for transmission of transmitting a large amount of data, it was found 
necessary to divide them in a large number of messages. 

These messages are sent in sequence on the network, in a logic order, that is to say one 
30 after the other, separated by a short interval, for example one second. 
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As certain systems of this type do not use a return channel towards the managing 
management centre, i.e. a channel enabling a communication from the subscriber 
towards the management center, as for example a modem, it is difficult for the managing 
management centre to know if the sent data s e nt is has arrived correctly. In this 
5 wa yAccordingly , it is oblig e d necessary to repeat these messages periodically so as to 
statistically ensure that each message is has arrived at its destination. 

A subscriber module includes schematically a digital receiver, either audio^ or video or 
data T (and or possibly a combination of these three types), and a decoder able to extract 
10 the management messages, these latter being directed towards a security module 

comprising the subscriber database. This security module can be directly installed in the 
subscriber module or, for security and cost reasons, it can be realized as a d e tachabl e 
removable module such as an smart card or microchip card. 

1 5 The messages arriving to the security module are processed by the a_command 

interpreter. It is possible that the messages do not arrive in the broadcasting order in 
which they were broadcast, either because of interferences in the transmission or simply 
as the subscriber^ unit was not switched on when at th e mom e nt of th e s e nding of 
previous messages were sent . It is therefore necessary to specify that prior each to 

20 processing, each message is first decrypted and controlled for its authenticity. A message 
which does not satisfy the control criteria is rejected. In this cas e , If the security module 
wiU receives for e xampl e the third message before the first and second messages^ Tthe 
execution of the third message without the prerequisite execution of two previous 
messages can lead to blocking ef the database or to may generate an error. 

25 

A first solution consists in memorising all the messages constituting a chain and, when it 
is complete, to go on to its processing. This solution has the drawback to set limiting the 
length of the maximum chain according to the available memory availabl e. 

30 Since-Tthe memory capacity of d e tachabl e removable smart cards is limited, which this 
obliges the card to process each message when they arrive. 
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Brief Summary of the Invention 



The problem that the present invention proposes to solve, is to suppress on the 
subscriber's database the disastrous harmful effects due to the execution of messages in 
5 an order different te from that initially foreseen. 

This aim is fully reached by a transmission process of a chain of subscriber's databas e 
managem e nt messag e s, this proc e ss consisting of method of transmission of a chain of 
database management messages, the method comprising the step of associating with each 
10 message a conditional block which determines if the current message is to be processed 
with reference to all or part of others elem e nt message members of the chain and , in the 
negative event, the conditional block comprises the specifies conditions bound linked to 
the a previous processing of all or part of other e l e m e nts messages member of the chain. 

1 5 In fact, due thanks to this new conditional block included in each message e l e m e nts 

member of a chain, it is possible to determine if this message can be processed separately 
or ifit must satisfy the processing conditions related to ef processing of th e messages 
supposed to be received previously. It is obvious that tThis test also allows ake the 
system to determine if the presently evaluated message has already been processed the 

20 d e t e rmination if th e curr e nt m e ssag e e valuation has alr e ady b ee n proc e ss e d . 

To reach this aim, the security module disposes of a memory organized under the form of 
table indicating, for each chain, which ar e th e messages members of this the chain that 
have already been processed. After having proc e ssing processed ef all the members 
25 e l e m e nts of the chain, the table of this chain is maintained in order to avoid that the 
resending of the same chain restarts its execution. It can be deleted on request by the 
management centre or after a predefined time. 

The conditional block contained in the message does not only contain only a simple 
30 indication binding the processing of the current message to the condition of having 
executed the carried out the ex e cution of previous messages, but also covers more 
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complex functions, such as conditions related to each el e ment member of the message 
chain. For example, it is possible to d e fine bind the processing of element 4 of the chain 
en to the condition that either element 1 or 2 is processed and that element 3 is 
imperatively processed. We will thus have the function: 

5 

F(4) = (l or 2) and 3. 

We talc eln the example of the arrival te at the security module of a message member of 
family 5, this message being the e l e m e nt member 4 of this family^ Tthe first operation 

10 will be to determine if its processing is subj e ct bound to other conditions. If this is not 
the case, it can be processed immediately. It should be noted that to chain the fact of 
chaining messages does not mean that the processing must be made in the index order of 
the chain. One can imagine the case where one loads a bulky software, and for this 
reason, one divides it to transmit it in a chain of messages. Each of these messages 

1 5 contains a loading address and the corresponding data. This is why an element of the 
chain can be processed in an indifferent order. On the other hand, the last el e m e nt 
member of the chain setting up this new software will contain a condition stating that all 
the e l e m e nts members of the chain must have been carri e d out executed in order to 
enable the execution of that this software can b e e x e cut e d . When this condition has b ee n 

20 is satisfied, the table corr es pond e nt corresponding to this family indicates that all 
messages have been carri e d out executed . 

According to a variant of the invention, the conditional block is divided in two parts, the 
one being called "operation" to describe the type of logic function and the other being 
25 called "related e l e m e nt member " to describe en which other e l e m e nts members the 

operation must apply. The format of the part "related e lem e nt member " corresponds to 
the format used in the table stored in the database designating the state of processing of 
the e l e m e nts members of the chain. In this way, the logic comparison is greatly 
facilitated. 

30 
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According to other embodiments, the conditional block does not refers net to all the other 
e l e m e nt s members of the chain, but only to some only of them . It would be for e xampl e 
possible to refer* to three previous elements and not to all the elements. This allows the 
reduction of the length of the conditional block and takes into account the fact that an 
5 interference rarely exceeds the time of three messages. According to another example, 
one could define a chain structure where only the last element contains a conditional 
block. 

This structure allows, unlike the solutions of the prior art, the system to reject only a 
1 0 minimum number of messages. In-fae tPreviously , when a message is miss e d was 

missing in a chain, all the following messages were rejected until the n e w passag e receipt 
of the missing message. The execution of a chain was in this way thus dependent upon 
the continuous reception of the members e l e m e nts of the chain, each missing element 
missing leading to the rejection of all messages having an higher index than the missing 
15 message. 

According to an embodiment of the invention, the subscriber module, besides sending the 
messages to the security module, includes a memory to memorise them as soon as they 
arrive. 

20 

Therefore, it is possible that the absence of a message containing a condition on a 
pr e c e ding previous message leads to reject all the following messages. When this 
awaited message arrives, it is of course processed authorising the processing of the other 
messages. It is possible otherwise that a long time elapsed before these missing messages 
25 are present in the transmission with the risk that some are rejected, for example due to the 
bad quality of the connection between the managing centre and the subscriber module. 

To minimize the number of repeated messages necessary for the completion of the chain, 
the security module can accede to the memory located in the subscriber module since it 
30 contains all the messages in their arrival order. Thus, as soon as the missing message 

arrives and its processing completed, the security module asks the reading of the memory 
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to process all the messages which have been rejected because of the condition on the 
missing message. 



An important aspect of the invention lies in presenting each message to the security 
5 module while storing it in a memory in the subscriber module. This principle can include 
exceptions when some messages are not d e stin e d intended to the security module but 
only to the subscriber module of th e subscrib e r . Thus, e v e n if although some messages 
are rejected by the security module as the conditions are not fulfilled, this syst e m module 
knows that this message is contained in the memory of the subscriber module and can, 
1 0 when the condition is fulfilled, accede to this the memory to proc ee d process these 
messages instead of awaiting a next passage of the following messages. 

In an embodiment, the memory of the subscriber module is organised as a stack with 
entry in series, each new entry causing the displacement of the previous entry (first-in 
15 first-out). 

The reading by the security module can be realised in different ways. It can ask the 
transmission of an exact address of the memory. Nevertheless, an important aspect of the 
security in this kind of application lies in the confidentiality of the organisation of the 
20 data. For this reason, instead of asking the transmission of a specific address, the security 
module asks the subscriber module to submit all or part of the messages contained in its 
memory. It is the task of the security module to sort out between the messages already 
carri e d out processed and the messages to carry out be processed . 

25 Brief description of the drawings 

The invention will be better understood based on the following detailed description which 
refers to ann e x e d the enclosed drawings which are given by way of a non limitative 
example, wherein: 

30 - Figure 1 represents a message sent according to the systems of the prior art; 
Figure 2 represents a message sent according to the invention; 
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Figure 3 represents one embodiment for updating implementing the temporary 
memory of the subscriber module. 

Detailed description of the invention 

5 

In Figure 1 the different blocks of a message which take part in the function of chaining 
are represented schematically. We find a first header block HD, which describes the kind 
of message, and contains the information that this message is part of a chain. To form the 
chain, a second family block FM indicates to which family this message belongs. In fact, 

10 it is possible that several chains are transmitted simultaneously and in this case the 

identification of the family is necessary. Now that the family is defined, the subsequent 
block FI is used to identify each element of the family and its place in the chain. So, with 
these two data, each element of the family can be placed at the right place in the chain. It 
is known to indicate either in control block Fl or in control block FM in on e or th e oth e r 

1 5 of control blocks FI or FM the maximum number of th e e l e m e nt members of the family. 
This function can equally be obtained by a particular marking of the last element of the 
family. 

In the example of figure 2, in a conditional block CD is added to the message of Figure 
20 1 . , showing th e two blocks FM and FI, on e add a suppl e mentary Conditional block CD 
which determines a the condition s necessary to carry out execute this message. 
According to a first embodiment of the invention, this block is constituted by a bit which 
indicates if the a previous message should must or should not have been executed. If this 
condition is requested, the interpreter in charge of the operations on the database^ will 
25 verify if whether the previous message has been executed prop e rly and in the positive 
event, will execute this new message. 

In another embodiment, this conditional block CD is constituted by comprises a field 
comprising groups, a group for each element of the chain. Each group contains a 
30 condition on an element of the chain and can have several meanings, for example the 
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condition "must have been executed", "can be have been executed" or "must not have 
been be executed". The latter condition is generally is the compl e ment mirror of the first. 

W e take In the example of a chain of 6 elements, the in which element 3 should must 
5 imperatively be carri e d out executed before element 5 . In this cas e, one can specify in 
message 3 that it s hould must not be carried out executed if message 5 was not 
proc e ss e d executed . This condition can lead to a blocking if one does not specify the 
inverted condition in message 5. In this case, message 5 will contain the condition "must 
be have been executed"^ in reference to the message 3 A in ord e r so that if message 5 
1 0 arriveds before message 3, it will be not be processed. 

In Figure 3, an implementation of the memory M of the subscriber module and the 
connection with the security module are represented. The incoming flux stream is firstly 
filtered by a module SEL, which has the task to s e parat e of separating the managing 

1 5 messages from the other data. These messages are then transmitted to the selection 
module S W which has the task te of send ing them to the different modules i.e. the 
security module SM, te the processing centre CTR of the subscriber module STB and te 
the memory M of the subscriber module. The storage in to the memory of these messages 
causes the increment of the input message pointer so that no message will be lost, the 

20 oldest message being then eliminated from the memory. In the same timeway, these 
messages are transmitted to the security module, represented here as aft smart card SM. 
This card SM contains a first memory managing module GM and a control command 
interpreter INT for managing the controls commands of the database BD. This memory 
manager GM can dialogue with the processing centre CTR by the connection I/O and by 

25 this means, to influence the connections in the selection module SW. The dotted line 
represented in Figure 3 represents the subscriber module STB. All the managing 
management messages addressed to the security module SM are directed by the selector 
SW to the security module, in particular to the memory manager GM, and are then are 
transmitted to the control command interpreter if the processing conditions are fulfilled. 

30 The memory manager GM updates the table of the processed messages proc e ss e s to make 
the necessary comparisons at the moment of the arrival of a new message. The 
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connection with the smart card SM is of in/out type and in this way thus information and 
controls commands can be sent at destination of to the subscriber module, this connection 
being represented by the line I/O. 



5 As explained previously, the memory M is physically in the subscriber unit STB. This is 
why the card SM can, by the int e rmediat e of th e lin e I/O via the I/O line , ask the 
availability of a memory section so as to be able to store the messages of a chain. In our 
example, the maximum number of elements in a chain does not exceed 16. SeThus, at 
the arrival of the first element of the chain, the card SM, by via the line I/O, requests the 
1 0 reservation of at least 1 6 memory places. If, during the transmission of this first chain, 
another chain is announced, the card will ask the reservation of 16 new places in order to 
ensure the storage of a maximum number of members of the chain according to the 
receiving conditions. 

1 5 In order to read the data contained in the memory M, for example the position M3, the 
card SM can order, through the selection module SW, the address multiplexer AMUX to 
return the content of this memory position. In order to forward these data towards the 
card, a data multiplexer DMUX has the function te of reading the required memory 
position r e quir e d and to transfer of transferring it towards the card. These different 

20 transfers are directed by the selection module SW. 

When the processing of the chain has been interrupted due to an interference on a 
message for example, the other messages continue to be stored in the memory of the 
subscriber module. When the missing message is retransmitted by the managing centre, 

25 it is executed properly and the memory manager GM recalls all the other messages of the 
chain acc e ding by accessing the memory of the subscriber module. In this case, the entry 
of the smart card SM is not made any longer made on the arrival of messages but on the 
contents of the memory M. This access to memory M can either be made in direct access 
specifying a memory address, or by sequential access by reading the messages in their 

30 arrival order. 
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In an one embodiment, the memory M is organized as a buffer memory buff e r of having 
a fixed length according to the availability of the free memory of the subscriber module. 
This memory includes an input pointer incr e a se d incremented on each message 
introduced in the memory, and an output pointer incr e as e d incremented on each reading 
5 by the memory manager GM. 

The communication possibility between the card SM and the subscriber module STB, in 
particular the centre CTR, authorises more complex functions. One of the probl e m 
frequently met problems at the moment of the replacement of one or the other of the 

10 elements of the system, either the card or the subscriber module, is to ensure the 

compatibility of the functions with the material of previous generations. For this, it is 
interesting to allow communication between the different elements in order to establish 
the functions available in each of them; this is the task of the line I/O line which allows te 
send sending instructions ef from the card to the subscriber module. These instructions 

1 5 can, for example, ask the subscriber module to communicate its audio, video or data 
functions, the generation of the module or the software version. To answer to this 
request, the module STB disposes of means to compose a managing message and to 
transmit it 7 either in the memory M for further reading by the card, or directly to the card, 
such as represented in Figure 3. 

20 

According to another embodiment of the invention, the module STB disposes of a 
conn e ction by modem connection with the managing centre. In this case, the 
announcement of resources can be made by the module STB to the managing centre 
through the modem, on request of the security module SM. 

25 

As indicated in Figure 3, the module STB also receives in th e sam e way the managing 
messages coming from the managing centre. The messages arriving to the processing 
centre CTR can contain a configuration request instruction. The response can be made 
by the modem connection or be transmitted to the card SM. Some of these managing 
30 messages are only destined to the module STB and the processing centre CTR, 
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responsible te from the management of the module STB, will not transmit them to the 
security module SM or to the memory M. 
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ABSTRACT 

Thi s invention consists in a process and in a transmission syst e m of The 
processing of a chain of database updating messages transmitted between a managing 
centre and a plurality of subscriber databases is improved by geographically shar e d. 
Each m e ssag e includes a chain identifier (FM) and a chain ind e x (FI) allowing th e 
identifcation of th e m e ssag e in the chain. If a m e ssag e is not r e c e ived following an 
int e rf e r e nc e in the connection, the proc e ssing of further m e ssag e s can cause th e locking 
of databas e s. In ord e r to avoid this drawback, th e solution consists in adding to each 
message a condition block (CD) which determines if4his whether that message has to 
may be processed without reference to other elements of the chai n, and if not, for 
defining or which ar e the conditions that must be linked to the pr e vious processing of that 
elements of the chain. 
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